September 2016 - Pki-devel - Dogtag Pki List Archives

[PATCH] 830 Removed support for creating system certificates in different tokens.

by Endi Sukma Dewata

The patch that added the support for creating system certificates in different tokens causes issues in certain cases, so for now it has been reverted. https://fedorahosted.org/pki/ticket/2449 -- Endi S. Dewata

7 years, 7 months

1
1
0 / 0

Fedora PKI_Documentation page has some broken links

by Elio Maldonado

On http://pki.fedoraproject.org/wiki/PKI_DocumentationtThe Quick Links area has these 3 broken links http://directory.fedoraproject.org/wiki/Fortitude not found, haven't found a replacement, there probably is none at all http://directory.fedoraproject.org/wiki/CoolKey not found and should be changed to http://pki.fedoraproject.org/wiki/CoolKey http://directory.fedoraproject.org/wiki/Windows_Certificate_Auto_Enrollment not found, found this one: https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/... not sure if it's a good one given that's for CS 8.0 -Elio

7 years, 7 months

1
0
0 / 0

[PATCH] 828-829 Removed FixSELinuxContexts upgrade script.

by Endi Sukma Dewata

The FixSELinuxContexts upgrade script has been removed temporarily due to a problem importing selinux library during RPM upgrade. The FixDeploymentDescriptor script number has been changed accordingly. The code in the RPM spec that moves the upgrade scripts has been updated to reflect the FixSELinuxContexts deletion. The libselinux-python is used by deployment and upgrade scripts to set the SELinux contexts, so a direct runtime dependency has been added to the RPM spec file. The duplicate python-ldap and python-lxml dependencies have been removed. https://fedorahosted.org/pki/ticket/2452 -- Endi S. Dewata

7 years, 7 months

1
1
0 / 0

[PATCH] 0130 Prevent deletion of host CA cert and key from NSSDB

by Fraser Tweedale

Hi, Attached patch fixes https://fedorahosted.org/pki/ticket/2443. Thanks, Fraser

7 years, 7 months

2
2
0 / 0

[PATCH] 0131..0132 Fix LWCA entryUSN handling

by Fraser Tweedale

The attached patches address a couple of issues related to handling entryUSN attribute when reading lightweight CA entries. https://fedorahosted.org/pki/ticket/2444 Thanks, Fraser

7 years, 7 months

2
2
0 / 0

[PATCH] 827 Added support to create system certificates in different tokens.

by Endi Sukma Dewata

Previously all system certificates were always created in the same token specified in the pki_token_name parameter. To allow creating system certificates in different tokens, the configuration.py has been modified to store the system certificate token names specified in pki_<cert>_token parameters into the CS.cfg before the server is started. After the server is started, the configuration servlet will read the token names from the CS.cfg and create the certificates in the appropriate token. https://fedorahosted.org/pki/ticket/2449 -- Endi S. Dewata

7 years, 7 months

3
4
0 / 0

[PATCH] 0133 Revoke lightweight CA certificate on deletion

by Fraser Tweedale

Hi team, The attached patch implements cert revocation on LWCA deletion. The TODO for parametrising over revocation reason and invalid date is intentional - I just want to get the minimal viable solution into 10.3.x ASAP and we can look at what more is wanted/needed later. Thanks, Fraser

7 years, 7 months

2
1
0 / 0

Karma Requests for pki-core-10.3.5-4

by Matthew Harmsen

*The following updated candidate builds of pki-core 10.3.5 on Fedora 24, 25, and 26 (rawhide) consist of the following: * * *Fedora 24* o *pki-core-10.3.5-4.fc24 <http://koji.fedoraproject.org/koji/buildinfo?buildID=795475> * * *Fedora 25* o *pki-core-10.3.5-4.fc25 <http://koji.fedoraproject.org/koji/buildinfo?buildID=795726> * * *Fedora 26* o *pki-core-10.3.5-4.fc26 <http://koji.fedoraproject.org/koji/buildinfo?buildID=795727> * *Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were also updated: * * *https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo * [group_pki-10.3.3] name=Copr repo for 10.3.3 owned by @pki baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/epel-... skip_if_unavailable=True gpgcheck=1 gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/pubkey... enabled=1 enabled_metadata=1 *These builds address the following PKI tickets: * * PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working <https://fedorahosted.org/pki/ticket/1578> * PKI TRAC Ticket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided <https://fedorahosted.org/pki/ticket/2414> * PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value <https://fedorahosted.org/pki/ticket/2423> * PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements <https://fedorahosted.org/pki/ticket/2436> o added check for pki-server-nuxwdog parameter * PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server <https://fedorahosted.org/pki/ticket/2439> *Please provide Karma for the following builds: * * *Fedora 24* o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-36fa3fd8c3 pki-core-10.3.5-4.fc24 * * *Fedora 25* o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-abb1e5d2a6 pki-core-10.3.5-4.fc25 *

7 years, 7 months

2
1
0 / 0

[PATCH] 233 - fix incrorrect URLs in CertRequestInfos

by Ade Lee

Fix CertRequestInfo URLs The URLs were generated by a UriBuilder that referred to the resource's annotated path. This top-level path changed though, even if the underlying paths did not. Replace this with a reference to the getX methods instead. Also fixed a few eclipse flagged warnings (unused imports etc). Ticket 2447 Please review ..

7 years, 7 months

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel September 2016